I want to live in a world with these privacy and security improvements! I think the kernel of the issue is leverage. Big gov has so much power to gain from private/public partnership surveillance. In the face of that tremendous, inebriating power, what leverage could be a big enough stick to force change? Fines would have to be huge to force change. What I’ve gathered from cocktail party chat with consultants is that big industry and big gov budget more for fines than they do for infrastructure. They accept fines, and lawyers to evade fines, as the “just the cost of doing business.” Fines and legal teams are almost always cheaper than “doing the right thing” whether the right thing is investing in long term secure data storage centers, respecting privacy, or preventing chemical pollution.